Security Consultant

The functional role of the security consultant is to provide internal corporate security consulting services, develop and enhance policy architecture and processes, assess business security risks, recommend security controls that enable the business to be in control of risks, promote security awareness and strengthen relationships with business units by creating value for business stake holders.

Specific responsibilities include the following:
* Recommend and implement business security strategies, architectures and infrastructures that align with the business strategies of the client
* Recommend business security policies and standards
* Develop and implement business security awareness programs
* Develop business security management processes and methodologies
* Work with business units to assess the impact of strategic business directions on information security threats, vulnerabilities and risks
* Provide security subject matter expertise on projects undertaken by business units, application development and technology teams
* Integrate business security strategies with overall business and IT strategies
* Provide business security governance leadership and advice
* Act as a management advisor on all business security policy, security strategy and risk management issues
* Act as a security subject matter expert in pre-sales activities and draft the security section in bid proposals
* Audit and report on security compliance within the business
* Manage all work assignments on a project basis, covering the project full life cycle starting with initial client contact and agreeing a terms of reference through project delivery and implementation.

PRE-SALES/BID SECURITY CONSULTING
Contributes subject matter expertise to bids, assessing bid for security requirements, ensuring that relevant security risks are identified and addressed in the proposed solution.
Provides an Information Assurance capability for the Bids Technical Design Authority (TDA) solution Prepares or contributes to the security risk plan.
Researches and maintains up to date knowledge within the information security fields
Assists in the due diligence process of identifying security issues which may exist within client organisation

SECURITY CONSULTANCY
Defines, agrees, and documents terms of reference (TOR) for the project assignment, accurately reflecting the client's requirements.
Takes the lead in defining and influencing the appropriate level of security to be implemented, based on business requirements and security best practice

SECURITY MANAGEMENT
Takes on the role of security manager and is responsible for ensuring that the business is in control of security risks
Ensures that proper security processes covering IT, business processes, business operations, physical security, security management and security policies and procedures are implemented and managed within the business.

SECURITY AUDITING
Takes on the role of a security auditor, working with clients to assess whether or not the client is compliant with contractual security requirements or security best practice.
Ensures that auditing is done in a business focused and pro-active way, making sure that compliance assessments are accurate and results presented

TEAM DEVELOPMENT
Actively contributes to the development of the security team processes and practices, contributing templates, sharing new knowledge and ideas, ensuring that the internal team processes and practices are continuously improved.

PERSONAL AND PROFESSIONAL DEVELOPMENT
Stays up to date with regards to current security knowledge, models, methodology, processes, technology and security best practice.

Aspires to relevant professional qualifications and certifications, such as BS7799 Lead Auditor, CISSP, CISA, CISM, GIAC, CLAS and familiarity with CRAMM or similar risk assessment methodologies.

Capita Resourcing welcome applications from all suitably qualified people regardless of gender, race, disability, age or sexual orientation.

Capita Resourcing is a trading name of Capita Resourcing Ltd. Services offered are those of an Employment Agency and Employment Business. Applicants will be required to register with us.